CVE-2005-2878
high · 7.5Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.
7.5
CVSS
14.6%
EPSS (exploit prob.)
96th
EPSS percentile
2005-09-13
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| gnu | mailutils | 0.6 |
Check a specific version with /api/v1/cve/match.
References
- http://marc.info/?l=bugtraq&m=112785181316043&w=2
- http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407
- http://secunia.com/advisories/16783
- http://secunia.com/advisories/17020
- http://www.debian.org/security/2005/dsa-841
- http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml
- http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true
- http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c
- http://www.securityfocus.com/bid/14794
- http://marc.info/?l=bugtraq&m=112785181316043&w=2
- http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407
- http://secunia.com/advisories/16783
- http://secunia.com/advisories/17020
- http://www.debian.org/security/2005/dsa-841
- http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml
- http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true
- http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c
- http://www.securityfocus.com/bid/14794
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-2878